摘要
为解决常规的网络通信异常检测方法存在的异常检测延时过高问题,实现网络通信异常实时检测,基于关联规则设计一种新的网络通信异常检测方法。首先,提取网络通信异常参数判断异常行为特征值;其次,基于关联规则构建网络通信异常检测模型挖掘网络通信异常数据;最后,进行网络通信异常检测。实验结果表明,设计的网络通信异常关联规则检测方法的异常检测延时较低,检测效果较好,有一定的应用价值,可作为后续网络通信维护的参考。
In order to solve the problem of high anomaly detection delay of conventional network communication anomaly detection methods and realize real-time network communication anomaly detection,a new network communication anomaly detection method is designed based on association rules.First,extract network communication anomaly parameters to determine the characteristic values of anomalous behavior;second,construct a network communication anomaly detection model based on association rules to mine network communication anomaly data;finally,perform network communication anomaly detection.The experimental results show that the designed network communication anomaly association rule detection method has low anomaly detection delay and good detection effect,which has certain application value and can be used as a reference for subsequent network communication maintenance.
作者
吕甦
LV Su(School of Information and Blockchain Technology,Xinyang Art Vocational College,Xinyang Henan 464000,China)
出处
《信息与电脑》
2022年第18期192-194,共3页
Information & Computer
关键词
关联规则
网络通信
通信异常
异常检测
association rules
network communication
communication anomalies
anomaly detection
